respond-bad-spi (Services IKE Policy)
Syntax
respond-bad-spi max-responses;
Description
Enable response to invalid IPsec Security Parameter Index (SPI) values. If the security associations (SAs) between two peers of an IPsec VPN become unsynchronized, the device resets the state of a peer so that the two peers are synchronized.
Options
| max-responses | Number of times to respond to invalid SPI values per gateway. |
Range: 1 through 30
Default: 5
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.3.